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MEMORANDUM FOR: Director of Central Intelligence 


VIA: Deputy Director for Administration 
Deputy Director of Central Intelligence 


FROM: | Robert W. Gambino 
| Director of Security 


SUBJECT: | Industrial Security - Unannounced 
Security Audit Policy 


Ls Action Requested: It is requested that you approve 
the recommendation contained in paragraph 4 to permit notice 


to the Agency's industrial contractors of impending industrial 
security audits. 


2. Background: Since the inception of the industrial 
security audit program in May 1977, all such audits have been 
unannounced. This policy is in furtherance of your instruc- 
tions following the Boyce/Lee case that "The Director of 
Security, !in coordination with cognizant project security 
officers, jestablish a program for the conduct of periodic, 
unannounced comprehensive security surveys (read audits) of 
industrial contractor facilities." 


Industrial contractor reaction to industrial security 
audits has been highly favorable overall, and security programs 
in industry for the protection of Agency classified materials 
have shown marked improvement. Industrial contractors have, 
however, almost universally reacted unfavorably to the un- 
announced character of these audits. They have expressed the 
opinion that unannounced audits lead to an adversary relation- 
Ship between themselves and the Agency, and foster antagonism 
and mistrust. This feeling was again strongly voiced by the 
Agency contractors who attended the Industrial Security 
Conference, held at Agency Headquarters on 27 and 27 September 
1979. 
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Experience has shown that the persons most knowledge- 
able of the security aspects of Agency programs are not always 
available when our audit teams arrive on site without notice. 
In one instance, an audit team arrived only to learn that the 
firm was closed for 2 weeks' summer vacation. 


em unannounced, and that we would 
modified its policy to permit a 
I share the feeling of the industrial 

contractors and of the Agency security and contracting staffs 
involved in the audit Program. They maintain, and I believe 
rightly so, that an industrial contractor can hardly revise 
entire security systems on short notice; the unannounced nature 
of security audits contributes to a weakening of rapport; and 
there is ground for reasonable compromise, to the extent of 
about three days' advance notice. 


4. Recommendation: It is recommended that you, in the 
interest of fostering better understanding between the Agency 
and its industrial contractors, approve the amendment of 
current Agency policy in order to permit some limited.advance 
notice to Agency industrial contractors of impending comp re - 
hensive industrial facility security audits. If you approve 
this recommendation, we will go from the "unannounced" policy 
to "no more than 72 hours' notice." 


Robert W. Gambino 


APPROVED: 


Director of Central Intelligence , 
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